Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ec/7a26e6-f7ae-4df0-9ecb-d879f7e709d6/1/GrY03HT2A3ukcxHRJ0IOdvKWvlQ.mft
File:                     GrY03HT2A3ukcxHRJ0IOdvKWvlQ.mft (raw, json)
Hash identifier:          IuPdrsetl9y8iUgrzphcGL6bQHUpKT1PS3Ipm8jU/r0=
Subject key identifier:   AD:BC:07:20:BC:06:57:3F:DB:EB:39:50:7D:1B:70:F3:01:65:14:2A
Authority key identifier: 1A:B6:34:DC:74:F6:03:7B:A4:73:11:D1:27:42:0E:76:F2:96:BE:54
Certificate issuer:       /CN=1ab634dc74f6037ba47311d127420e76f296be54
Certificate serial:       01A0FD5999F6BA0C227B5F2BEAE72B306503
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/GrY03HT2A3ukcxHRJ0IOdvKWvlQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ec/7a26e6-f7ae-4df0-9ecb-d879f7e709d6/1/GrY03HT2A3ukcxHRJ0IOdvKWvlQ.mft
Manifest number:          1A8A
Signing time:             Fri 02 Oct 2026 16:01:42 +0000
Manifest this update:     Fri 02 Oct 2026 16:01:42 +0000
Manifest next update:     Sat 03 Oct 2026 16:01:42 +0000
Files and hashes:         1: GrY03HT2A3ukcxHRJ0IOdvKWvlQ.crl (hash: wLYkXV0Tk2eK8uFCN108ugv4fZepWSrNsJ2xzOW4OEs=)
                          2: PQmZGdLaHEnq_VA_WaIJhBCllzw.roa (hash: msKFFd75Ii7SQGyNHduha6GJ+oyOsZeJqgi+9OI13LY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ec/7a26e6-f7ae-4df0-9ecb-d879f7e709d6/1/GrY03HT2A3ukcxHRJ0IOdvKWvlQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ec/7a26e6-f7ae-4df0-9ecb-d879f7e709d6/1/GrY03HT2A3ukcxHRJ0IOdvKWvlQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/GrY03HT2A3ukcxHRJ0IOdvKWvlQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 03 Oct 2026 16:01:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:fd:59:99:f6:ba:0c:22:7b:5f:2b:ea:e7:2b:30:65:03
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1ab634dc74f6037ba47311d127420e76f296be54
        Validity
            Not Before: Oct  2 16:01:42 2026 GMT
            Not After : Oct  3 16:01:42 2026 GMT
        Subject: CN=adbc0720bc06573fdbeb39507d1b70f30165142a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:09:b6:96:71:2b:f6:0f:dc:08:27:13:83:b1:
                    93:89:43:18:e2:5a:99:4b:32:e0:6a:27:b6:33:b5:
                    87:7a:d6:81:c5:e6:44:6b:01:93:ac:d7:83:04:44:
                    2f:c1:d5:82:29:a3:c4:2c:cc:a2:6c:80:c4:7b:32:
                    43:92:57:27:66:5b:84:e4:33:12:5e:e7:75:99:a2:
                    2e:c9:0c:a4:d2:4a:ae:b0:10:a6:14:e3:9c:13:16:
                    c3:02:14:25:e9:4b:38:d8:27:e1:e7:b7:63:2d:27:
                    27:54:0a:23:0e:1f:8a:d1:ca:73:47:c5:14:80:32:
                    03:88:55:b8:48:f2:14:60:b7:f5:ec:e9:a1:9a:bc:
                    98:4e:40:07:b4:02:7d:a0:d1:7d:45:d4:10:8c:78:
                    e0:11:53:4b:69:3a:cb:60:5d:fc:aa:d2:54:56:86:
                    3c:3f:8e:3c:f7:b4:f9:a1:8a:1f:7b:2a:d7:b2:67:
                    57:5a:82:63:e1:4a:52:cf:27:98:a2:ca:c6:01:d7:
                    a5:f7:8d:13:4b:f4:56:f7:ac:8c:1d:6d:1a:ec:bb:
                    2c:c4:5a:af:af:dd:dd:2b:53:55:6b:ac:2e:9e:e1:
                    6f:5f:cd:6c:b1:f5:7a:de:c6:6d:07:a7:a1:b5:53:
                    f7:a7:45:2d:47:31:32:d8:86:53:8d:cd:e6:ac:a9:
                    a1:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AD:BC:07:20:BC:06:57:3F:DB:EB:39:50:7D:1B:70:F3:01:65:14:2A
            X509v3 Authority Key Identifier:
                keyid:1A:B6:34:DC:74:F6:03:7B:A4:73:11:D1:27:42:0E:76:F2:96:BE:54

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GrY03HT2A3ukcxHRJ0IOdvKWvlQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/7a26e6-f7ae-4df0-9ecb-d879f7e709d6/1/GrY03HT2A3ukcxHRJ0IOdvKWvlQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/7a26e6-f7ae-4df0-9ecb-d879f7e709d6/1/GrY03HT2A3ukcxHRJ0IOdvKWvlQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         66:0a:c0:06:48:df:98:8e:5e:23:18:33:ec:ae:e6:8d:dc:f7:
         64:3c:02:7d:fb:c4:c8:fa:7b:a3:47:3f:cb:45:f1:92:2e:84:
         dc:dc:2c:73:21:81:cf:72:2a:80:25:1c:33:53:ba:77:6f:09:
         5d:25:cd:96:b1:ef:72:5e:b0:7c:87:03:e5:5f:3a:f1:cc:ba:
         a6:4b:0c:1a:31:a7:83:07:07:98:2e:f5:e9:90:dc:f3:b1:d7:
         8f:96:ac:e7:bc:23:c8:f8:39:ab:a0:10:1a:ca:0a:01:33:11:
         44:28:d5:f7:74:87:49:c1:9a:87:41:cf:1c:f4:1f:0f:5f:a0:
         72:00:27:f5:b6:c4:5c:f9:4f:a4:59:8d:98:6e:7a:7f:0b:2a:
         87:10:cd:2e:b4:99:69:db:03:48:23:c4:1b:c9:bd:d5:84:cb:
         9f:8d:66:87:55:42:ec:8c:cd:fd:20:47:6a:40:2a:e5:12:92:
         43:7d:8b:1b:5e:8e:24:02:1c:bf:1a:fc:8b:5e:15:d1:44:74:
         ba:f9:2e:46:ca:01:3f:9d:39:04:98:55:7a:52:c4:f3:d5:4c:
         50:08:f4:56:90:54:9c:15:69:9d:3e:4a:5a:38:da:a4:74:ac:
         35:c3:af:5c:e2:e6:e1:13:49:0f:da:95:cc:44:df:01:2b:6e:
         9c:c0:6b:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 3 06:18:41 2026 by rpki-client